00 — README First

Macro: DOT_EXECUTION_WRAPPER_CORRELATION_PATCH_AND_KG_DRYRUN_HARNESS Date: 2026-06-04 · Mode: EXECUTION_MODE · Status: PARTIAL (all safe work done live; true dry-run blocked on no DOT runner)

What this macro did

Turned the observation substrate (tables + v3 views, from the prior macro) into a usable, generic no-execute correlation harness: two DB helper functions + three runtime toggles + one UI surface view, all additive, birth-free, reversible, and incapable of executing a DOT. It does NOT execute any DOT, does NOT create REAL_RUN, does NOT mark anything verified, does NOT birth/canon/promote.

Live mutation: YES — birth-free

birth_registry 1,158,306 before == after (rehearsed BEGIN/ROLLBACK net-zero, then committed; independent MCP read-back PASS). trigger_guard_alerts 129 unchanged.

Applied LIVE:

• 3 dot_config toggles — process_dot_runtime.{execute_enabled=false, dry_run_only=true, real_run_enabled=false} (mirror of the existing piece_event_runtime.* no-execute precedent).
• fn_process_run_observe(...) — pure-insert header observe; refuses REAL_RUN unless real_run_enabled=true.
• fn_process_component_observe(...) — pure-insert component observe; fail-closed on dot_code (must exist in dot_tools); refuses REAL_RUN.
• v_process_dot_wrapper_status — generic over all 303 DOT_* (not hardcoded to KG): runner_exists / wrapper_status / last_observation_type / next_action.

Key finding

The full safe-runtime scaffolding already exists — but only in the IU-command layer (fn_dot_iu_command_log, fn_dot_iu_operator_runtime_enabled, fn_dot_iu_runtime_lease_acquire/release, fn_assert_safe_for_dot_action). The DOT execution layer (dot_tools, engine agent_api) has none of it: no runner, no script_path, no plan mode, usage_count 0. This macro ports that proven pattern to the process-observation layer. The remaining blocker is purely the DOT runner itself (the thing that would call agent_api), which does not exist.

Reading order

01 live state · 02 runner inventory · 03 wrapper design · 04 harness apply/proof · 05 KG pilot package · 06 events · 07 status-upgrade rules · 08 RP/UI · 09 next macro · 10 summary · 11 checkpoint.

Rollback

contabo:/tmp/DOT_EXEC_WRAPPER_ROLLBACK.sql (DROP view → DROP 2 functions → DELETE 3 config keys). No data births to undo.